CVE-2015-2062

Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remote administrators to execute arbitrary SQL commands via the removeslide parameter in a popup_posts or edit_cat action in the sliders_huge_it_slider page to wp-admin/admin.php.

• CWE-89

• http://packetstormsecurity.com/files/130796/WordPress-Huge-IT-Slider-2.6.8-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/archive/1/534852/100/0/threadedNot Applicable, Third Party Advisory, VDB Entry
• https://wordpress.org/support/topic/huge-it-slider-security-vulnerability-notification-sql-injectionThird Party Advisory
• https://www.htbridge.com/advisory/HTB23250Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/130796/WordPress-Huge-IT-Slider-2.6.8-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/archive/1/archive/1/534852/100/0/threadedNot Applicable, Third Party Advisory, VDB Entry
• https://wordpress.org/support/topic/huge-it-slider-security-vulnerability-notification-sql-injectionThird Party Advisory
• https://www.htbridge.com/advisory/HTB23250Exploit, Third Party Advisory

Published

Feb 8, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2054CRLF injection vulnerability in export.cfg in the web-based …
• CVE-2015-2055Zhone GPON 2520 with firmware R4.0.2.566b allows remote atta…
• CVE-2015-2058c2s/c2s.c in Jabber Open Source Server 2.3.2 and earlier tru…
• CVE-2015-2059The stringprep_utf8_to_ucs4 function in libin before 1.31, a…
• CVE-2015-2060cabextract before 1.6 does not properly check for leading sl…5.3
• CVE-2015-2061Heap-based buffer overflow in the browser plugin for PTC Cre…
• CVE-2015-2063Integer overflow in unace 1.2b allows remote attackers to ca…
• CVE-2015-2064Multiple cross-site scripting (XSS) vulnerabilities in DLGua…
• CVE-2015-2065SQL injection vulnerability in videogalleryrss.php in the Ap…
• CVE-2015-2066SQL injection vulnerability in DLGuard 4.5 allows remote att…
• CVE-2015-2067Directory traversal vulnerability in web/ajax_pluginconf.php…
• CVE-2015-2068Multiple cross-site scripting (XSS) vulnerabilities in the M…